@gwakko/shared-websocket 0.13.0 → 0.14.5

package/src/SharedSocket.ts

@@ -8,6 +8,8 @@ interface SharedSocketOptions {
   reconnectMaxDelay?: number;
   /** Max reconnect attempts before giving up (default: Infinity). */
   reconnectMaxRetries?: number;
+  /** Close codes that mean "auth failed — stop reconnect." Default: [1008]. */
+  authFailureCloseCodes?: number[];
   heartbeatInterval?: number;
   sendBuffer?: number;
   auth?: () => string | Promise<string>;
@@ -34,7 +36,8 @@ export class SharedSocket implements Disposable {
 
   private reconnectAttempts = 0;
 
-  private readonly opts: Required<Omit<SharedSocketOptions, 'auth' | 'authToken' | 'authParam' | 'pingPayload' | 'serialize' | 'deserialize'>> & {
+  private readonly opts: Required<Omit<SharedSocketOptions, 'auth' | 'authToken' | 'authParam' | 'pingPayload' | 'serialize' | 'deserialize' | 'authFailureCloseCodes'>> & {
+    authFailureCloseCodes: ReadonlySet<number>;
     auth?: () => string | Promise<string>;
     authToken?: string;
     authParam: string;
@@ -52,6 +55,7 @@ export class SharedSocket implements Disposable {
       reconnect: options.reconnect ?? true,
       reconnectMaxDelay: options.reconnectMaxDelay ?? 30_000,
       reconnectMaxRetries: options.reconnectMaxRetries ?? Infinity,
+      authFailureCloseCodes: new Set(options.authFailureCloseCodes ?? [1008]),
       heartbeatInterval: options.heartbeatInterval ?? 30_000,
       sendBuffer: options.sendBuffer ?? 100,
       auth: options.auth,
@@ -76,7 +80,15 @@ export class SharedSocket implements Disposable {
 
     this.setState('connecting');
 
-    const connectUrl = await this.buildUrl();
+    let connectUrl: string;
+    try {
+      connectUrl = await this.buildUrl();
+    } catch {
+      // auth() threw or returned no token — pause reconnect until user
+      // provides fresh creds via ws.authenticate(token) or ws.reconnect().
+      this.setState('failed');
+      return;
+    }
     this.ws = new WebSocket(connectUrl, this.opts.protocols);
 
     this.ws.onopen = () => {
@@ -96,8 +108,14 @@ export class SharedSocket implements Disposable {
       for (const fn of this.onMessageFns) fn(data);
     };
 
-    this.ws.onclose = () => {
+    this.ws.onclose = (ev) => {
       this.stopHeartbeat();
+      if (this.opts.authFailureCloseCodes.has(ev.code)) {
+        // Auth-failure close code — don't burn retries with stale creds.
+        // User must call ws.authenticate(freshToken) or ws.reconnect() to resume.
+        this.setState('failed');
+        return;
+      }
       if (!this.disposed && this.opts.reconnect) {
         this.scheduleReconnect();
       } else {
@@ -228,7 +246,14 @@ export class SharedSocket implements Disposable {
     // Resolve token: callback > static > none
     let token: string | undefined;
     if (this.opts.auth) {
+      // If the auth callback throws, let it propagate — connect() catches and
+      // pauses reconnect until the user supplies fresh creds.
       token = await this.opts.auth();
+      if (!token) {
+        // Configured auth callback returned no token. Treat as a fatal auth
+        // condition (don't silently connect without credentials).
+        throw new Error('SharedSocket: auth() returned no token');
+      }
     } else if (this.opts.authToken) {
       token = this.opts.authToken;
     }